CVE-2020-21362

magicblack/maccms10

on github

Published

August 11, 2021

Severity

CVSS v3:

5.4 MEDIUM

CVSS v2:

3.5 LOW

Description

A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter.

References

https://github.com/magicblack/maccms10/issues/78

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:maccms:maccms:10.0:::::::*	n/a	n/a	10.0

External Links

NVD - CVE-2020-21362